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PROVISIONING WEB SERVICES 

FIELD OF THE INVENTION This invention relates to the field of web services, and in 
particular to the provisioning of web services. 



BACKGROUND 

10 Web services are computer operations or functions that can be invoked remotely using an 

Internet based protocol over the web. 

Communication between the client and server takes place over the Internet using standard 

Internet protocols. Simple Object Access Protocol (SOAP) over Hypertext Transfer Protocol 

(HTTP) is commonly used. A web service can be invoked from any machine that has Internet 
1 5 access, and the services themselves can be hosted in any data center that provides HTTP access. 

As well, web services are currently defined using the Web Services Definition Language 

(WSDL). WSDL is a meta-description of web services. In addition to being readable by a 

human user, WSDL is easily read and processed by computer applications. This enables better 

web service client and server composition tools, as well as dynamic discovering, binding and use 
20 classes of applications. 

Web services exchange data through the use of text based XML documents. These 

documents may be specified in a fashion that is computer language and computer platform 

neutral. As a result, web services may be invoked from any client to any server without requiring 

the client and server to utilize the same language or operating system. 
25 Web Services Flow Language (WSFL) is a standard that supports the composition of web 

services into business process models. It does this by capturing the orchestration and 

choreography of a given composition of services. 

Many computer applications exist for the modeling of business processes. These 

applications enable the creation of the models to automate the business process. The modeled 
30 processes are called workflows. The component of an application, which performs the process 

automation, is called a workflow engine. 
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Certain web services, particularly those for which fees and financial accounts are 
involved typically require significant provisioning or preparation of associated resources. 

Accordingly, the inventors have recognized the need to provide systems and methods for 
provisioning web services. 

5 

SUMMARY OF THE INVENTION 

An aspect of the present invention is directed towards a web service provisioning system 
for provisioning at least one web service. 

The provisioning system includes a subscription system having web service description 
10 data correlated to the at least one web service, and provisioning processes data correlated to the 
at least one web service. The provisioning system also includes an invocation system operatively 
coupled to the subscription system. 

The provisioning system may also include a service catalog system configured to select at 
least one web service. The service catalog system may also be configured to determine user 
15 profile data. Preferably, the invocation system includes a workflow execution engine configured 
to receive user profile data and provisioning processes data, and configured to invoke 
provisioning processes data. 

Another aspect of the present invention is directed towards a method of provisioning at 
least one web service, the method comprising the following steps: 
20 a. providing user profile data; 

b. providing web service description data correlated to the at least one web service; 

c. providing web service provisioning processes data correlated to the at least one 
web service; 

d. selecting at least one web service; 

25 e. invoking the web service provisioning processes data correlated to the selected at 

least one web service. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Embodiments of the present invention will now be described, by way of example only, 
With reference to the following drawings, in which like reference numerals refer to like parts and 
In which: 

FIGURE 1 is a schematic diagram of the components of a web services system which 
must be provisioned in order to give a consumer access to a web service; 

FIGURE 2 is a schematic diagram of a web provisioning system, made in accordance 
with the present invention; 

FIGURE 3 is a schematic diagram of the invocation system portion of the web 
provisioning system of Figure 2; 

FIGURE 4 is a flow diagram of the method of provisioning a web service in accordance 
with the present invention; and 

FIGURE 5 is a schematic diagram of a provisioned web service. 
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DETAILED DESCRIPTION OF THE INVENTION 

The procedure used to complete a task within a business is called a business process. 
Consider the process followed when a request to purchase a stock is performed over the phone. 
5 The customer representative (CR) first verifies the identity of the caller who is requesting the 
purchase, and finds the customer account. Next the CR forwards the request to the trader to 
make the purchase. Once completed, a confirmation of the purchase must be provided back to 
the customer, and the customer's account debited for the cost of the transaction. There maybe an 
approval step involved, for example if the purchase was for a significant number of shares, or for 

1 0 an amount that exceeded the customer's current account balance. 

A business process can be represented with a process description language. If the steps of 
the process can be automated, a program that can interpret the process description language may 
be used to manage the process from start to completion. A description that represents a business 
process is often referred to as a workflow. 

1 5 Consider the process to purchase stocks on behalf of a customer described above. Each 

of the steps of that process could be implemented as a web service that can be invoked remotely 
via the Internet. Such a complex process could be described as a composition of web services. 
As will be understood by one skilled in the art, the Web Services Flow Language (WSFL) can be 
used to represent compositions of web services. 

20 A simple web service could be developed to determine a stock quote: 

getStockQuote( String symbol ); 

A service of this type is a remote procedure call (RPC) that would be invoked by a client 
application. As will be understood, the stock "symbol" is a parameter which is required to 
invoke the procedure call. A typical implementation of this web service would be the conversion 

25 of the request into a proprietary call over a local connection to retrieve the current stock price 
from an application which keeps track of stock prices. The result would be converted back to 
SOAP format and returned to the client application. 

Such a web service can be invoked without requiring information about the identity of the 
caller. As noted, the only required parameter is the stock symbol. Many organizations offer this 

30 type of web service free of charge. 
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Consider now the implementation of a web service that is used to purchase a stock. This 
call might appear as: 

purchaseStock( String symbol, String accountID, Int numberOfShares ); 
5 In this example, the required parameters include the referenced account ("accountID"). 

The account must be known to the system providing the web service beforehand, in order to 
verify the account information and to assign the ownership of the purchased stocks appropriately. 
Typically, a commission would be charged against the account (often based on the value of the 
stock purchased), in addition to a fixed charge for using the web service. 

10 Accordingly, before a customer can use the purchaseStock web service, an account must 

be established for that customer, and other information such as the customer's name and address 
must be provided. The data center network infrastructure must be configured to route the web 
service requests and responses appropriately. These steps are a business process. Configuring a 
system with account and other information sufficient to allow a particular consumer to access a 

1 5 particular web service is referred to as "provisioning". 

Figure 1 illustrates a typical commercial web service system, shown generally as 10, and 
components 12 that may need to be provisioned in order to give a consumer 14 access to a web 
service 16 (such as the purchaseStock web service discussed above) over the Internet 18. 

The components 12 of the web service system 10 may include a Security System 20 or 

20 module, which will need to be provided with a user identity and/or password in order to 

authenticate the consumer 14 when using the web service 16. The Security System 20 will also 
often require a list of the system 10 resources to which the consumer 14 will need access to use 
the web service 16. A Billing System 22 or module may also be required in order to charge the 
consumer 14 for the use of the web service 16. Accordingly, the Billing System will need to be 

25 provisioned with a billing account for that consumer 14. A User Profile System 24 or module is 
also common. Typically, the User Profile System 24 will be provisioned with and record personal 
information or user profile data about the consumer, such as the consumer's name, address and 
phone number. While not shown, other components will often require provisioning for elaborate 
commercial web services. 
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As will be understood, the steps in the provisioning process for the web service system 10 
would typically include: configuring the Security System 20 with the consumer's 14 identity 
and/or password; creating an account for the consumer 14 in the Billing System 22; storing the 
consumer's 14 user profile data in the User Profile System 24; and informing the component 
5 providing the web service 16 that the consumer 14 is ready to access the web service 16. 

Figure 2 illustrates a WSFL-based web service provisioning system, shown generally as 
100, made in accordance with the present invention. The provisioning system 100 includes a 
subscription system 1 10 and an invocation system 112. 

The subscription system 110 includes a service catalog system or module 1 14, as well as 
10 a web service provisioning database 1 16. The provisioning database 1 16 contains web service 
description data 118 (ie. a WSDL description correlated to each web service 16), and WSFL 
provisioning process (or workflow) data 120 corresponding to the web service steps required for 
provisioning each web service 16. The service catalog module 1 14 is configured to present to the 
user 14 each of the available web services (including web service 16), as well as the correlated 
1 5 WSDL description for each available web service. Through the service catalog module 114, the 
user 14 may then select one or more desired web services 16. 

The service catalog module 1 14 is also configured to determine and store user profile data 122 
(shown on Figure 3) corresponding to the user 14, typically by requiring the user 14 to input the 
required data. 

20 Once the user has selected a web service 1 6, the service catalog module 1 1 0 passes the 

WSFL provisioning process data 120 correlated to the web service 16, as well as the user profile 
data 122, to the invocation system 1 12. Typically, the WSFL provisioning process data 120 and 
the user profile data 122 are stored and transferred as text based XML documents. 

Figure 3 illustrates in greater detail the basic components of the invocation system 1 12, 
25 and its relationship to the components 20 to be provisioned. The invocation system 1 12 includes 
a WSFL execution engine 130, which is provided with the WSFL provisioning process data 120 
and the user profile data 122. 

As illustrated in Figure 3, each of the steps in the provisioning process exists as a node 
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132 in the WSFL provisioning process data 120. Each node 132 contains web service invocation 
data for invoking a particular provisioning web service created to implement one step of the 
5 provisioning process. 

By way of example only, the following illustrates a simple provisioning workflow. The 
first node 134 may be designed to invoke a web service which establishes a user identity and/or 
password on the security system 20 corresponding to the consumer 14. Similarly, the second 
node 136 may invoke a web service for storing the user profile data 122 in the user profile system 

10 24. The third node 138 may invoke a web service for creating a billing account corresponding to 
the user 14 on the billing system 22. A fourth node 140 may also be required to invoke a web 
service for informing the component providing the web service 16 that the consumer 14 is ready 
to access the web service 16. As noted previously, however, a comprehensive commercial web 
service system 1 0 may include other components which require provisioning, and which will 

15 result in additional corresponding nodes 132 in the provisioning process data 120. 

As will be understood, one or more of the nodes 132 in a provisioning process may be 
interruptible. Such interruptible workflow steps may require decision-making or other human 
interaction by the service provider. For example, an interruptible workflow step or node 132 
may be provided which allows the service provider to determine if the web service 16 for a 

20 particular user 14 will be operate on a fast server or a slower one, possibly based on the user's 14 
anticipated requirements. 

Referring now to Figure 4, illustrated therein is a logical flow diagram summarizing the 
steps carried out in provisioning at least one web service in accordance with the method 200 of 
the present invention, described in greater detail, above. These steps include providing user 

25 profile data (Block 210), and providing web service description data correlated to the at least one 
web service (Block 212). The method 200 also includes the step of providing provisioning 
processes data correlated to the at least one web service (Block 214). Typically the provisioning 
processes data is in WSFL format. Finally, the method 200 includes the steps of selecting at least 
one web service (Block 216), and invoking the provisioning processes data correlated to the 

30 selected at least one web service (Block 218). 
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Figure 5 illustrates the process of invoking a web service once the various components 
have been provisioned by the web service provisioning system 100. When the user's 14 client 
application 150 requests invocation of the web service 16, the web services server 152 (and 
5 particularly the security system 20) will first verify the identity of the user 14. The user data 
provided by the client application 150 is compared to data stored by the security system 20 
during the provisioning process. If the identity of the user 14 is valid, the billing system 22 will 
be informed of the invocation of the web service 16, in order to appropriately invoice the user's 
14 account (also created during the provisioning process) for charges established for using the 
10 web service 16. Finally, the web service 16 itself will be invoked. 

Thus, while what is shown and described herein constitutes preferred embodiments of the 
subject invention, it should be understood that various changes can be made without departing 
from the subject invention, the scope of which is defined in the appended claims. 



